skills/mukul975/anthropic-cybersecurity-skills/performing-ssrf-vulnerability-exploitation/Gen Agent Trust Hub
performing-ssrf-vulnerability-exploitation
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external web responses, which presents a surface for indirect prompt injection if the agent interprets the test results as instructions.\n
- Ingestion points: The
test_ssrf_payloadfunction inscripts/agent.pycaptures the first 500 characters of the target's response body and includes them in the generated report.\n - Boundary markers: There are no explicit delimiters or warnings to the agent to disregard instructions potentially contained within the gathered data.\n
- Capability inventory: The skill performs network requests using the
requestslibrary and writes results to a local JSON file.\n - Sanitization: The ingested content is truncated but not otherwise sanitized or escaped.\n- [METADATA_POISONING]: There is a minor metadata inconsistency where the skill author is listed as 'mahipal' while the license copyright is attributed to 'mukul975'. This does not impact functionality but is noted as a metadata discrepancy.
Audit Metadata